CVE-2013-7175

MEDIUM 6.5CVE-2013-7175 · Published 24/01/2014 · updated 17/06/2026

In short

CVE-2013-7175 is a MEDIUM (CVSS 6.5) vulnerability affecting visual certexam manager (avanset).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
visual certexam manager avanset	`= 2.0= 2.1= 2.1.1= 2.3= 2.4= 2.4.1= 2.4.2= 2.5= 2.6= 2.7= 2.8= 2.8.1= 3.0= 3.0.1= 3.1= 3.1.1= 3.2= 3.2.1≤ 3.3`	No fix yet

Description

Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) Title, (2) File name, or (3) Candidate Name field.

References

osvdb.org/102414
kb.cert.org/vuls/id/869702 · Third Party Advisory
securityfocus.com/bid/65104

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free